Azuki Twitter Account Hacked, Hacker Was Able to Drain Over $750K

In less than 30 minutes, malicious links pretending to be a “land mint” for the popular Azuki NFT project stole more than $750,000 worth of USDC, 11 NFTs, and over 3.9 ETH. But the mint was a fake, and the link took users to a “drainer” contract that tricked them into signing a transaction that swiped assets from their wallets.

Etherscan data provided by Web3 security firm WalletGuard shows that a single user seems to have sent over $750,000 worth of stablecoin USDC to the attacker’s wallet by accident.

Many NFT traders quickly figured out that Azuki’s tweets about the fake “surprise mint” were a sign that the account had been hacked. Within an hour, the official Azuki Twitter account was no longer showing up in Twitter search results, and the malicious tweets had been taken down.

Twitter user’s reaction

Scam Alert!
The Azuki Twitter is hacked, and has shared a fake land minting site that is a wallet drainer. pic.twitter.com/ndD9qPWzGk

— Fire (@_joinfire) January 27, 2023

Rose, who is in charge of the Azuki Community, quickly confirmed that the Azuki account had been broken into.

AZUKI OFFICIAL TWITTER ACCOUNT IS HACKED.
DO NOT CLICK LINKS FROM OUR ACCOUNT.
PLEASE RETWEET.

— Rose | | NGL (@emilyrosemcg) January 27, 2023

The Phantom wallet team has also marked the malicious domains as unsafe, which will warn Phantom wallet users who try to connect to the sites.

Azuki's Twitter has been compromised.
Do not visit any links posted from their account. We've already blocked several sites to keep our users protected.
Stay safe out there! pic.twitter.com/ma9j0ZRrPr

— Phantom (@phantom) January 27, 2023

Azuki Head of Community and Product Manager Dem said in a Twitter Space an hour after the account was hacked that the Azuki team is in touch with Twitter and trying to get control of the account back. “We’re on top of the situation,” he said

After some time, Rose announced on Twitter that the bad links on the account had been removed; nevertheless, mobile users may still see them.

Bad links on the account are now gone, but we're hearing reports that they may still be showing up for mobile users.
Probably something due to caching or however Twitter works on mobile…
Please DO NOT click any links claiming a land mint/giveaway until your phones catch up.

— Rose | | NGL (@emilyrosemcg) January 27, 2023